Description: Fix security problems
Forwarded: no
Author: Daniel Echeverry <epsilon77@gmail.com>
Last-Update: 2016-02-20
--- a/source/translat.c
+++ b/source/translat.c
@@ -268,14 +268,14 @@ digraph(u_char *command, u_char *args, u
 			my_strcat(buffer2, buffer1);
 			if ((++i % 10) == 0)
 			{
-				put_it(CP(buffer2));
+				put_it("%s",CP(buffer2));
 				buffer2[0] = (u_char) 0;
 			}
 		}
 		if (buffer2[0])
-			put_it(CP(buffer2));
+			put_it("%s",CP(buffer2));
 		snprintf(CP(buffer2), sizeof buffer2, "%d digraphs listed.", i);
-		say(CP(buffer2));
+		say("%s",CP(buffer2));
 	}
 }